This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
File:                     9_nYpDVdZzudTn8VXTp45eZg_qU.mft (raw, json)
Hash identifier:          eISIqYS7O0F9QKvR0ssmwUWFKRp7RLscc/D1hoR8lPM=
Subject key identifier:   AF:2D:8A:34:84:F1:11:C4:DE:97:7C:BC:28:AE:A1:6B:87:50:64:DD
Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
Certificate issuer:       /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Certificate serial:       0504
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
Manifest number:          04FC
Signing time:             Sat 06 Dec 2025 16:51:02 +0000
Manifest this update:     Sat 06 Dec 2025 16:51:01 +0000
Manifest next update:     Sat 13 Dec 2025 16:51:01 +0000
Files and hashes:         1: 9_nYpDVdZzudTn8VXTp45eZg_qU.crl (hash: 2UeNIZJHXU774YvMNhNaeolNKiRK5bQ6fwGz0i+fgnI=)
                          2: 53647CC8284511EE8A9EF045C4F9AE02.roa (hash: J2C44o3bulGEWCNj5FeHw89zdl6vfT7xLoQDvxzcXms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl
                          rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 15:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284 (0x504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
        Validity
            Not Before: Dec  6 16:51:01 2025 GMT
            Not After : Dec 13 16:51:01 2025 GMT
        Subject: CN=69345ef6-8777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dc:74:c2:49:f9:82:ab:c2:ca:72:33:73:ab:
                    3b:cc:8f:25:35:3e:71:9e:94:f8:5a:b1:9f:3c:33:
                    de:57:14:7d:14:54:c5:08:67:f9:bb:68:61:6c:b8:
                    6d:56:5e:80:39:58:02:bb:73:fb:93:a9:c2:2d:f0:
                    bf:8f:d4:04:ec:32:0b:6a:6e:de:3d:db:2f:94:44:
                    07:66:40:85:78:1a:e0:b9:94:24:33:82:2b:97:4f:
                    00:f2:ea:3a:c4:86:e0:65:6f:0e:75:12:d6:98:54:
                    53:31:4b:b7:be:24:09:5e:9b:59:42:aa:5c:a2:14:
                    c9:43:5e:71:c8:26:3c:cf:bc:34:be:39:8c:5d:d2:
                    78:e3:48:08:b2:bf:bd:9c:a3:d4:4b:2e:40:67:d7:
                    29:d3:ca:44:5c:70:a8:96:40:0d:08:98:4b:67:80:
                    c1:b8:7f:28:fb:78:4f:d2:8d:42:19:65:9e:44:cf:
                    0f:e1:75:5d:fb:07:74:da:82:19:66:69:0f:1e:03:
                    1d:17:c8:87:df:ea:84:16:8e:15:a1:8d:7d:d5:36:
                    28:3e:54:f5:52:2f:d2:88:a0:2a:51:90:49:2c:64:
                    1f:c4:c1:41:15:6b:72:b7:50:3b:57:7e:c0:10:ce:
                    f6:01:cb:66:93:78:56:ad:2e:21:8b:32:bd:80:30:
                    ba:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:2D:8A:34:84:F1:11:C4:DE:97:7C:BC:28:AE:A1:6B:87:50:64:DD
            X509v3 Authority Key Identifier:
                keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c0:d3:1f:fa:34:e2:ef:f3:7d:87:ae:78:b8:8e:d1:10:ab:
         21:39:91:41:26:44:14:37:80:28:df:e3:1b:60:94:6e:dd:b7:
         87:61:fb:dc:c2:3f:5c:20:2f:66:f1:75:44:29:78:4f:ba:15:
         14:b0:e1:b3:de:90:6e:4f:12:f6:57:d6:09:4b:c7:40:db:69:
         42:6e:a1:dd:1b:c4:8a:14:3b:bf:66:3a:24:3f:a8:97:27:be:
         8e:37:81:10:a4:8a:4d:56:30:57:57:43:cb:5f:71:f2:d1:d5:
         90:75:d9:9b:4a:55:72:76:96:92:53:db:b8:80:6c:69:dc:8d:
         9c:89:64:f6:ad:56:3d:55:80:d9:5f:29:87:a3:67:f9:b4:e5:
         07:1e:85:d4:e4:76:43:aa:14:77:54:f5:f1:0a:5a:d2:ca:51:
         a5:3f:81:82:f8:72:91:e4:5c:74:26:2d:1e:09:0f:1c:cb:b3:
         94:c9:05:cf:62:d8:9e:48:a8:99:4a:27:ee:6b:63:e3:56:aa:
         f0:0f:2d:19:df:7f:be:33:c8:c9:60:a4:78:df:e2:6f:2a:18:
         c9:e2:f2:2f:12:11:6d:c4:fa:9a:2a:42:34:ce:1a:b7:5a:af:
         4e:a1:75:5c:88:b1:16:15:a4:ad:4d:7c:5a:7d:de:18:7f:86:
         48:f0:d4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:46:51 2025 by rpki-client